Every requirement, date and task.
One page per Cyber Security tender in Amsterdam.

The State of Cyber Security Procurement in Amsterdam

Updated 24 September 2026

Procurement framework and notice sources

Dutch public procurement follows the Aanbestedingswet 2012 (the Public Procurement Act 2012), which transposes EU Directive 2014/24/EU. Dutch buyers publish on TenderNed, and above-threshold notices also appear in the EU's Tenders Electronic Daily (TED). These statutory publications outline the procedural standards, submission criteria, and legal frameworks governing public purchases.

For the Netherlands, the Lucius catalog indexes open notices from TED. The Lucius catalog has no separate feed for Amsterdam; its Amsterdam notices come from the national feeds. In total, Lucius AI keeps a live index of 230,000+ public tenders from 15 official sources in 170+ countries. Teams track these official publications to ensure no applicable public tenders are overlooked.

Market activity across the Netherlands

On 24 September 2026, across the whole of the Netherlands, not only Amsterdam, 1,317 notices were open across all sectors. This baseline reflects the broader public procurement landscape accessible through the indexed publications. Public contracting entities issue opportunities spanning various technical domains, including physical infrastructure maintenance, communication networks, administrative tooling, and security services.

Bid professionals monitor this broader field to track procurement pipelines and understand the distribution of public solicitations. Because tender dossiers often contain complex technical annexes, bid managers evaluate published notices against company capabilities before committing internal resources to proposal preparation.

Open cyber security opportunities

Within open cyber security notices from buyers in the Netherlands (not specific to Amsterdam), tenders were matched by the catalog's Cyber Security sector tag, or one of these words in the title or English summary: cyber, cybersecurity, information security, penetration testing. On that date, relevant public solicitations included the following:

• Veiligheidsregio Haaglanden was procuring a combined SIEM platform and SOC service, including implementation, management, monitoring, and incident response, closing in September 2026.
• Gemeente Lansingerland was procuring an API Gateway and Enterprise Service Bus (ESB) solution to manage message traffic between municipal applications, closing in October 2026.
• Ministerie van Economische Zaken was procuring laboratory measurement services for radio equipment and devices, closing in October 2026.
• Staatsbosbeheer was procuring a data protection and security awareness platform for approximately 1,750 accounts over an estimated eight-year period, closing in October 2026.
• Gemeente Rotterdam was procuring maintenance and management services for the process automation systems of its civil structures, closing in October 2026.

Contracting authorities and buyer mix

Across all open notices in this set, 12 different buyers were publishing on TED. Municipalities, regional security bodies, state ministries, and research institutions all release requirements through official procurement streams.

The most active buyers in the same scope were Stichting Universiteit voor Humanistiek (2 notices), BIJ12 namens IPO (1 notice), Gemeente Lansingerland (1 notice), Gemeente Rotterdam (1 notice) and Gemeente Zaanstad (1 notice). Each contracting entity sets its own technical criteria, terms of contract, and submission instructions, requiring bid managers to review each pack carefully.

Typical responsibilities for bid managers

Bid managers lead the decision on whether to bid. Lucius AI gives a bid/no-bid verdict on the tender to support this gate review. When deciding to pursue an opportunity, bid managers own the compliance matrix and the plan for the submission. The software reads a public-sector tender pack and extracts every requirement into a register, with a citation to the page each requirement comes from. Lucius AI builds a compliance matrix from that requirement register.

Bid managers also assign questions to contributors and track progress to the deadline. In addition, they raise clarification questions with the buyer within the clarification period. Teams also review contract and commercial terms with the commercial or legal lead before sign-off. Lucius AI scans the contract terms for commercial risk, such as liquidated damages, liability caps and indemnities, providing clear reference points for that review.

Drafting from past bids and exporting

Lucius AI drafts responses from the company's own past bids, kept in its Bid Library. This function enables bid managers to supply contributing authors with structured starter text drawn directly from previously approved submissions, preserving organisational phrasing and approved project references.

The software exports its work to Word, Excel and PDF. Teams use these exported outputs to share requirement registers, review commercial risks with legal teams, circulate drafts, and finalise documentation ahead of submission deadlines.

Bidders into Amsterdam cyber security contracts compete under TED, TenderNed and Aanbestedingswet 2012. Sector-specific compliance bars include penetration-testing accreditation, information-security certification (ISO 27001) and a recognised cyber-assessment framework. When a tender asks for any of them, Lucius lists that requirement with its page and a quote from the source.